Patches Ancient Excel bug comes out of retirement for active attacks Vuln old enough to drive lands on CISA's exploited list While Microsoft was rolling out its bumper Patch Tuesday updates…
With April's Patch Tuesday hitting just yesterday, Microsoft released updates to address 167 security vulnerabilities. This is the second highest number of vulnerabilities ever patched on a Patch Tuesday (beat out…
…Find My Network Exploited to Send Messages An exploit allows messages and additional data to be sent across Apple's Find My network, according to the findings of a security researcher. Security…
…Endpoint security firm Huntress confirmed active exploitation before the patches existed. What the two zero-days do The more severe of the two, CVE-2026-41091 , carries a CVSS score of 7…
This is something that has been bouncing around my head for the past couple weeks with the flood of security related news around Mythos and the number of 0days being found.Microkernels, unikernals, hardware-enforced capa…
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
I've been running a small fleet of honeypots for about a year. They get hit by a mix of research scanners (Censys, Shadowserver, etc.), old worms, and a bump of CVE probes the day a new Nuclei template ships. The data wa…
A newly published proof-of-concept(PoC) exploit has renewed attention on a Windows vulnerability that researchers say may not have been fully resolved despite an earlier security fix from Microsoft. The…
…4747 , and described it thus: "Mythos Preview fully autonomously identified and then exploited a 17-year-old remote code execution vulnerability in FreeBSD that allows anyone to gain root on a machine…
…A security researcher named ichfly was poking around the console's backwards-compatible DS mode, and discovered what ultimately became the first major 3DS exploit. The 3DS had full hardware and software…
…Build agentic AI security skills with the GitHub Secure Code Game Learn to find and exploit real-world agentic AI vulnerabilities through five progressive challenges in this free, open source game that…
…Mobile The Pixel 10 is getting a major security boost you'll never actually see Google has integrated Rust into the modem to proactively block memory-safety exploits. By • April 14, 2026…
…By weaponizing the model to generate a Python-based exploit for a two-factor authentication bypass, the actors demonstrated that AI excels at spotting hard-coded trust assumptions that traditional automated tools…
